How do we fix correlation ID errors when launching O365 in SSO?

Run the following command on the UPN accounts to convert them from (your domain).com to (your domain).onmicrosoft.com, and back again. This resynchronized them with the federated settings and synchronized Microsoft's value behind the scenes: